tribuchet: building on eliza Sourcing pytest-check-hook Using pytestCheckPhase Running phase: unpackPhase unpacking source archive /nix/store/4w6c2k1h0pd7dsjynz3nnfczsm9rmhdb-source source root is source Running phase: patchPhase Running phase: updateAutotoolsGnuConfigScriptsPhase Running phase: configurePhase no configure script, doing nothing Running phase: buildPhase Running: $ pre-commit run --all-files check-merge-conflicts....................................................Passed check-merge-conflicts-2..................................................Passed clang-format.............................................................Failed - hook id: clang-format - files were modified by this hook meson-format.............................................................Passed nixfmt...................................................................Passed shellcheck...............................................................Passed zizmor...................................................................Failed - hook id: zizmor - exit code: 12 INFO zizmor: 🌈 zizmor v1.30.0 WARN audit: zizmor: zizmor is running in offline mode by default; some audits and auto-fixes will not be available. see https://docs.zizmor.sh/usage/#operating-modes for details INFO audit: zizmor: 🌈 completed .github/workflows/backport.yml INFO audit: zizmor: 🌈 completed .github/workflows/ci.yml INFO audit: zizmor: 🌈 completed .github/workflows/labels.yml INFO audit: zizmor: 🌈 completed .github/workflows/upload-release.yml help[self-repository]: use GitHub's dedicated self-repository syntax --> .github/workflows/ci.yml:32:13 | 32 | - uses: ./.github/actions/install-nix-action | - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...' | _______| | | 33 | | with: 34 | | dogfood: ${{ github.event_name == 'workflow_dispatch' && inputs.dogfood || github.event_name != 'workflow_dispatch' }} 35 | | extra_nix_config: 36 | | experimental-features = nix-command flakes 37 | | github_token: ${{ secrets.GITHUB_TOKEN }} 38 | | use_cache: false | |________________________- this step | = note: audit confidence → High = note: this finding has an auto-fix = help: audit documentation → https://docs.zizmor.sh/audits/#self-repository help[self-repository]: use GitHub's dedicated self-repository syntax --> .github/workflows/ci.yml:48:15 | 48 | - uses: ./.github/actions/install-nix-action | - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...' | _________| | | 49 | | with: 50 | | dogfood: ${{ github.event_name == 'workflow_dispatch' && inputs.dogfood || github.event_name != 'workflow_dispatch' }} 51 | | extra_nix_config: experimental-features = nix-command flakes 52 | | github_token: ${{ secrets.GITHUB_TOKEN }} | |___________________________________________________- this step | = note: audit confidence → High = note: this finding has an auto-fix = help: audit documentation → https://docs.zizmor.sh/audits/#self-repository help[self-repository]: use GitHub's dedicated self-repository syntax --> .github/workflows/ci.yml:98:13 | 98 | - uses: ./.github/actions/install-nix-action | - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...' | _______| | | 99 | | with: 100 | | github_token: ${{ secrets.GITHUB_TOKEN }} 101 | | dogfood: ${{ github.event_name == 'workflow_dispatch' && inputs.dogfood || github.event_name != 'workflow_dispatch' }} ... | 104 | | # Since ubuntu 22.30, unprivileged usernamespaces are no longer allowed to map to the root user: 105 | | # https://ubuntu.com/blog/ubuntu-23-10-restricted-unprivileged-user-namespaces | |__________________________________________________________________________________- this step | = note: audit confidence → High = note: this finding has an auto-fix = help: audit documentation → https://docs.zizmor.sh/audits/#self-repository help[self-repository]: use GitHub's dedicated self-repository syntax --> .github/workflows/ci.yml:156:13 | 156 | - uses: ./.github/actions/install-nix-action | - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...' | _______| | | 157 | | with: 158 | | github_token: ${{ secrets.GITHUB_TOKEN }} 159 | | dogfood: ${{ github.event_name == 'workflow_dispatch' && inputs.dogfood || github.event_name != 'workflow_dispatch' }} | |______________________________________________________________________________________________________________________________- this step | = note: audit confidence → High = note: this finding has an auto-fix = help: audit documentation → https://docs.zizmor.sh/audits/#self-repository help[self-repository]: use GitHub's dedicated self-repository syntax --> .github/workflows/ci.yml:232:13 | 232 | - uses: ./.github/actions/install-nix-action | - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...' | _______| | | 233 | | with: 234 | | github_token: ${{ secrets.GITHUB_TOKEN }} 235 | | dogfood: ${{ github.event_name == 'workflow_dispatch' && inputs.dogfood || github.event_name != 'workflow_dispatch' }} 236 | | extra_nix_config: "sandbox = true" | |__________________________________________- this step | = note: audit confidence → High = note: this finding has an auto-fix = help: audit documentation → https://docs.zizmor.sh/audits/#self-repository help[self-repository]: use GitHub's dedicated self-repository syntax --> .github/workflows/ci.yml:292:13 | 292 | - uses: ./.github/actions/install-nix-action | - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...' | _______| | | 293 | | with: 294 | | github_token: ${{ secrets.GITHUB_TOKEN }} 295 | | dogfood: ${{ github.event_name == 'workflow_dispatch' && inputs.dogfood || github.event_name != 'workflow_dispatch' }} 296 | | extra_nix_config: | 297 | | experimental-features = flakes nix-command ca-derivations impure-derivations 298 | | max-jobs = 1 | |______________________- this step | = note: audit confidence → High = note: this finding has an auto-fix = help: audit documentation → https://docs.zizmor.sh/audits/#self-repository help[self-repository]: use GitHub's dedicated self-repository syntax --> .github/workflows/upload-release.yml:26:15 | 26 | - uses: ./.github/actions/install-nix-action | - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...' | _________| | | 27 | | with: 28 | | dogfood: false # Use stable version 29 | | use_cache: false # Don't want any cache injection shenanigans 30 | | extra_nix_config: | 31 | | experimental-features = nix-command flakes | |______________________________________________________- this step | = note: audit confidence → High = note: this finding has an auto-fix = help: audit documentation → https://docs.zizmor.sh/audits/#self-repository 35 findings (3 ignored, 25 suppressed, 7 safe fixes): 0 informational, 7 low, 0 medium, 0 high diff --git a/src/libstore/build/derivation-building-goal.cc b/src/libstore/build/derivation-building-goal.cc index 5792cec..92d8e69 100644 --- a/src/libstore/build/derivation-building-goal.cc +++ b/src/libstore/build/derivation-building-goal.cc @@ -1069,8 +1069,7 @@ Goal::Co DerivationBuildingGoal::buildLocally( || settings.extraPlatforms.get().count(drv->platform) || drv->isBuiltin(); auto required = drvOptions.getRequiredSystemFeatures(*drv); auto & available = worker.store.config.systemFeatures.get(); - bool featuresOk = - std::ranges::all_of(required, [&](const std::string & f) { return available.count(f); }); + bool featuresOk = std::ranges::all_of(required, [&](const std::string & f) { return available.count(f); }); if (worker.settings.maxBuildJobs.get() != 0 && platformOk && featuresOk) { debug( "external builder declined '%s'; falling back to a local build",